 
     ["/upload"
      {:post {:summary "Upload XML from a Vubis export"
-             :middleware [wrap-restricted]
-             :swagger {:security [{:apiAuth []}]}
+             :middleware [wrap-restricted wrap-authorized]
+             :swagger {:security [{:apiAuth []}]}
+             :authorized #{:etext :it}
              :parameters {:multipart {:file multipart/temp-file-part}}
              :handler (fn [{{{:keys [file]} :multipart} :parameters}]
                         (let [tempfile (:tempfile file)

                            (not-found)))}

      :patch {:summary "Patch a production, e.g. update the library_signature"
              :middleware [wrap-restricted]
              :swagger {:security [{:apiAuth []}]}
              :parameters {:path {:id int?}
                           :body {:library_signature ::prod.spec/library_signature}}
              :handler (fn [{{{:keys [id]} :path {:keys [library_signature]} :body} :parameters}]


    ["/:id/repair"
     {:post {:summary "Repair a production"
             :middleware [wrap-restricted wrap-authorized]
             :swagger {:security [{:apiAuth []}]}
             :authorized #{:admin :studio :it}
             :parameters {:path {:id int?}}
             :handler (fn [{{{:keys [id]} :path} :parameters}]
                        (let [p (prod/get-production id)]
